The Sponsor supports a diverse set of corporate goals across the organization by conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies. The Sponsor requires subject matter expertise in technical risk analysis of, IT systems and networks, mobile and wireless networks, cloud-based computing, network management platforms, communication protocols, scripting or programming products, configuration scripts, and IT hardware and software products in support of Sponsor's risk assessment activities. The Sponsor also requires software development to maintain an online infrastructure, evaluating and extracting relevant data, web development, and software coding.
Responsibilities - Manage security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement
- Ensure network and endpoint systems are secure, efficient, and compliant
- Manage Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations
- Configure OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment
- Segment networks using VLANs and Access Control Lists in a Zero Trust model
- Implement network segmentation strategies to enhance security and minimize the attack surface
- Oversee endpoint provisioning, patching, and hardening via ManageEngine; to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up-to-date
- Administer Windows 11, Linux, and BlueStacks
- Manage and support endpoint operating systems and Android emulators to ensure they meet performance and security standards
- Enforce GPOs and AD-integrated access controls
- Implement and manage Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions
- Develop and deploy automation scripts to streamline policy enforcement and system management tasks
Requirements - TS/SCI FSP Clearance
- Demonstrated hands on experience with firewall administration
- Demonstrated experience with Network Access Control
- Demonstrated experience with Access Controls
- Demonstrated experience with VPN tunneling
- Demonstrated experience with endpoint security and mobile emulation environments
- Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks
Desired Skills - Demonstrated experience collaborating with cybersecurity and VDI teams, Sponsor or otherwise
- Demonstrated experience providing training and support
- Demonstrated experience developing and maintaining network and endpoint security policies and procedures
- Demonstrated experience conducting regular security assessments
- Demonstrated experience implementing Zero Trust security model
- Demonstrated experience engaging in continuous improvement related to identifying opportunities for enhancing network and endpoint security measures and implement innovative solutions to improve overall security posture
- Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+
